how can I upgrade an osquery agent without launcher?
Lets say I only want to upgrade one of the endpoints to a specific version. Could I simply execute the binary from that version?
04/20/2021, 2:39 PM
This depends a lot on how you distribute and manage osquery in general.
Yes, you can just grab the newest osquery binary. It should work with your existing osquery directories.
The process for downloading, installing, and managing on a client is very much up to you though.
Kolide Launcher’s update mechanism is downloading from Kolide’s servers, and replacing on disk. There’s nothing special in how it handles osquery.
If you use puppet, chef. anisble, or similar configuration management tools, those can all fufill similar